Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd258a44-6287-39cb-86b5-2369f848e4cb.roa
File:                     cd258a44-6287-39cb-86b5-2369f848e4cb.roa (raw, json)
Hash identifier:          MAB+ykofWlDiLtfQ6/cAjGWTAqEeYouTNMwJ8BnY8C8=
Subject key identifier:   82:16:CB:C4:F0:FF:2B:C3:FD:67:CB:45:40:0F:F0:97:05:3E:CA:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDBBB1598359A84B4D829D200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd258a44-6287-39cb-86b5-2369f848e4cb.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     396561
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:15:98:35:9a:84:b4:d8:29:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=46265e62-c009-4744-b33e-67e4fcc412ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:0c:74:10:8e:a0:f0:ea:6b:ef:99:f3:8e:
                    73:71:8e:66:1f:e1:9b:4f:1b:3c:4f:db:fd:8c:a5:
                    c9:f4:f0:4e:79:14:e3:41:ae:ad:fb:77:f7:ea:94:
                    80:78:ff:4c:87:3a:5d:cb:79:47:70:b3:d3:fb:d3:
                    af:db:17:2e:0d:8d:9e:da:d3:58:18:da:b5:e4:cf:
                    75:0f:49:76:8b:e9:b4:23:ab:c5:dd:17:e2:84:d1:
                    73:7a:d6:c2:68:f1:45:ab:85:74:98:47:af:1a:3d:
                    d3:be:2e:1e:df:c2:75:23:84:11:30:f6:6d:70:5e:
                    d0:d8:f6:b2:80:da:90:bf:1a:94:67:e2:41:78:54:
                    d9:2e:18:8f:35:af:ff:fb:1d:2d:21:46:2a:71:e2:
                    f7:a6:c9:92:70:68:dc:3a:4f:e5:d5:27:4e:11:ab:
                    d2:06:10:f0:95:75:aa:b2:ce:68:31:87:a1:16:01:
                    89:b9:51:df:d2:ef:e2:48:80:d6:da:e5:2d:97:b4:
                    ae:05:78:07:8e:ec:e2:20:5b:08:8d:f0:6c:06:31:
                    68:1c:a3:e9:18:31:03:0d:6b:4e:f1:af:d0:3a:cc:
                    fc:69:53:95:c3:0e:ca:2d:00:b1:85:32:66:79:48:
                    2a:9c:6f:c1:2a:b2:28:40:8e:dc:49:d3:d5:4f:4a:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:CB:C4:F0:FF:2B:C3:FD:67:CB:45:40:0F:F0:97:05:3E:CA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd258a44-6287-39cb-86b5-2369f848e4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:f8:e2:66:e6:e8:b2:0a:9d:ae:58:e4:1e:6f:c3:fe:47:
         94:f0:f7:79:52:d6:09:cd:96:df:fb:dd:54:4c:33:93:35:f0:
         19:0a:51:63:e6:8e:c7:53:88:ef:f6:11:01:de:f9:cc:d8:0c:
         8a:eb:50:ec:ef:02:70:f3:02:e5:09:26:82:cd:8a:4a:31:29:
         e5:e3:bb:e2:62:88:84:a6:0d:14:24:fa:9e:d9:f5:fb:c0:aa:
         e8:6f:1b:a5:ee:b1:8b:ff:58:7c:13:6d:9c:c1:d4:96:e0:c9:
         1e:4f:20:90:d7:93:81:58:e5:96:fe:0b:e0:a3:e1:11:39:61:
         60:3b:4b:61:df:73:25:b0:47:eb:12:39:10:4f:b7:ed:ee:bd:
         f8:a6:a3:a7:dc:ba:e7:e3:7c:94:be:8b:94:9e:39:4f:c2:4a:
         3a:57:10:68:fd:05:f9:42:16:8c:ae:ca:4d:3a:aa:ee:e9:5a:
         e1:be:37:33:d6:9e:6e:a4:1d:9d:72:d7:20:b2:f1:4d:94:00:
         14:6c:95:a4:4a:80:03:99:c6:63:e5:d8:06:87:93:d7:15:1a:
         8f:26:38:78:7f:4e:45:80:22:e0:5b:55:69:dc:79:bc:f0:2b:
         1b:e9:30:03:35:68:69:98:c8:04:99:16:ee:2c:64:9a:06:79:
         47:fd:f0:f6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE3buxWYNZqEtNgp0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk
NDYyNjVlNjItYzAwOS00NzQ0LWIzM2UtNjdlNGZjYzQxMmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu4MdBCOoPDqa++Z845zcY5mH+GbTxs8T9v9
jKXJ9PBOeRTjQa6t+3f36pSAeP9Mhzpdy3lHcLPT+9Ov2xcuDY2e2tNYGNq15M91
D0l2i+m0I6vF3RfihNFzetbCaPFFq4V0mEevGj3Tvi4e38J1I4QRMPZtcF7Q2Pay
gNqQvxqUZ+JBeFTZLhiPNa//+x0tIUYqceL3psmScGjcOk/l1SdOEavSBhDwlXWq
ss5oMYehFgGJuVHf0u/iSIDW2uUtl7SuBXgHjuziIFsIjfBsBjFoHKPpGDEDDWtO
8a/QOsz8aVOVww7KLQCxhTJmeUgqnG/BKrIoQI7cSdPVT0raiwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIIWy8Tw/yvD/WfLRUAP8JcFPso/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2QyNThhNDQtNjI4Ny0z
OWNiLTg2YjUtMjM2OWY4NDhlNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCGjPjiZubosgqdrljkHm/D/keU8Pd5UtYJzZbf
+91UTDOTNfAZClFj5o7HU4jv9hEB3vnM2AyK61Ds7wJw8wLlCSaCzYpKMSnl47vi
YoiEpg0UJPqe2fX7wKrobxul7rGL/1h8E22cwdSW4MkeTyCQ15OBWOWW/gvgo+ER
OWFgO0th33MlsEfrEjkQT7ft7r34pqOn3Lrn43yUvouUnjlPwko6VxBo/QX5QhaM
rspNOqru6Vrhvjcz1p5upB2dctcgsvFNlAAUbJWkSoADmcZj5dgGh5PXFRqPJjh4
f05FgCLgW1Vp3Hm88Csb6TADNWhpmMgEmRbuLGSaBnlH/fD2
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:51:42 2026 by rpki-client